Dynamic code insertion and removal for static analysis based sandboxes

A system comprising:

• one or more computers operable to perform operations comprising:
• executing a first piece of code in a sandboxed application that is written to a secured memory;
• dynamically writing a new piece of code into code of the sandboxed application during runtime to a portion of the secured memory that cannot be executed by the sandboxed application;
• validating the new piece of code;
• and
• in response to a successful validation, writing the validated piece of code to a portion of the secured memory that can be executed by the sandboxed application.

A computer program product, tangibly embodied in a non-transitory computer-readable medium, comprising instructions operable to cause a programmable processor to perform operations comprising:

• executing a first piece of code in a sandboxed application that is written to a secured memory;
• dynamically writing a new piece of code into code of the sandboxed application during runtime to a portion of the secured memory that cannot be executed by the sandboxed application;
• validating the new piece of code;
• and
• in response to a successful validation, writing the validated piece of code to a portion of the secured memory that can be executed by the sandboxed application.